Visa Bets $2.4bn on Behavioral Biometrics to Stop Fraud Before Payment

Visa has agreed to acquire behavioral biometrics firm BioCatch for $2.4 billion in cash, moving to embed fraud detection into the moments before a payment is ever attempted rather than at the point of transaction. The all-cash deal, announced on 3 August 2026, buys the company from funds advised by private equity firm Permira and other shareholders, and is expected to close by the end of Visa's fiscal second quarter of 2027, subject to regulatory approval.

The acquisition targets a specific gap in how banks fight fraud. Most fraud controls trigger at the transaction: a card is charged, a transfer is initiated, and a risk model scores it in milliseconds. BioCatch works earlier, reading how a user physically interacts with a device, including keystroke rhythm, touch gestures, mouse movement, and how a phone is held, to distinguish a legitimate account holder from a fraudster, a bot, or a coerced victim during a live digital banking session. For Visa, the logic is to catch account takeovers, scams, money mules, and application fraud before they reach the payment rail Visa operates.

What is Visa actually buying?

BioCatch is a Tel Aviv-founded company, established in 2011, that analyses thousands of behavioral, device, and network signals in real time. Visa reports the company protects 1.8 billion devices and 760 million users worldwide and serves more than 350 banking clients across 21 countries, including over 100 of the world's largest banks. BioCatch says its models process more than 19 billion user sessions per month, scoring both user intent and signs of coercion or manipulation throughout a session.

The price reflects a steep re-rating. Permira first took a minority position in BioCatch through its Ascent strategy in early 2023, then acquired a majority stake in a 2024 secondary transaction that valued the company at roughly $1.3 billion. At $2.4 billion, Visa is paying close to double that mark for a holding period of a little over two years, a return that reflects how sharply demand for behavioral fraud tooling has grown as AI has lowered the cost of running scams at scale.

Why is Visa moving upstream of the transaction?

The deal fits a pattern Visa has been building for several years: pushing its fraud and security capability earlier in the customer journey and packaging it as value-added services sold to banks, rather than confining risk management to the transaction it processes. Andrew Torre, who leads value-added services at Visa, framed the acquisition as part of a strategy to help clients prevent cyber threats upstream and build trust into every transaction, citing an estimate that account takeovers and scams cost the global economy more than $1 trillion a year.

That $1 trillion figure is consistent with independent research. The Global Anti-Scam Alliance, in work with fraud-management firm Feedzai, put global scam losses at around $1.03 trillion for the year covered in its most recent State of Scams report, and a July 2025 brief from the U.S. Congress Joint Economic Committee cited an estimated $1 trillion stolen by scammers globally in 2024, more than one percent of global economic output.

The behavioral layer BioCatch supplies is increasingly treated as necessary because the older defensive perimeter is failing. Passwords and one-time codes are routinely defeated through phishing, credential stuffing, and infostealer malware, and generative AI has made convincing impersonation cheap. Account takeover fraud reflects that pressure: TransUnion reported that digital account takeover volume worldwide grew 21% from the first half of 2024 to the first half of 2025, and 141% over the four years to mid-2025. Behavioral signals are harder to fake than a stolen credential, which is the core of BioCatch's pitch.

How does this fit Visa's broader spending?

Visa says it has invested more than $13 billion in technology and infrastructure over the past five years to protect the payments ecosystem, and the company recently launched an open-source AI security tool, the Visa Vulnerability Agentic Harness, aimed at helping clients find and fix vulnerabilities at scale. The BioCatch purchase extends that spending into a discrete acquisition of capability rather than internal build, adding behavioral and device intelligence to a suite that already spans account opening through transaction monitoring. It also deepens Visa's relationship with issuing banks beyond core processing, at a point when value-added services revenue has become a closely watched growth lever for the network.

For BioCatch, the exit hands ownership to a distribution engine with direct relationships across the global banking system, and access to Visa's network-level view of fraud patterns. CEO Gadi Mazor pointed to the company's real-time intelligence-sharing networks between customer banks as a capability the combination could extend further, alongside the behavioral models the company has built over more than a decade.

Why This Matters to FinanceX Readers

For bank risk and fraud teams, the signal is that the card networks are moving decisively into the pre-transaction fraud layer, and doing it through acquisition rather than partnership. A network that both processes the payment and sells the behavioral intelligence upstream of it holds a data advantage that standalone fraud vendors, including firms like BioCatch's own peers in behavioral biometrics, cannot easily match. That reshapes the competitive map for the independent fraud-analytics and identity vendors banks currently buy from.

For investors tracking Visa, the deal is another data point in the shift toward value-added services as a growth driver beyond transaction volume, and a $2.4 billion cash outlay is a concrete measure of how much the network is willing to spend to own that layer. For the wider industry, the acquisition reinforces a direction regulators have been pushing: treating fraud risk and cyber risk as a single integrated control function rather than two separate reporting lines. The near-doubling of BioCatch's valuation in two years also tells investors something about where private and strategic capital now sees durable value in fraud infrastructure.